The inaugural Redflags Behavioural Impact Report offers a grounded view into how security decisions are made across the modern workforce and what shapes them at the moment risk appears. Built for CISOs, security practitioners, and anyone looking to understand human risk within their organisation; it explores emerging behaviours and captures the nuances that traditional reports and security awareness programmes often miss.

Far from a snapshot, the analysis features a sample size of 28,000 employees over the course of 2025. We could have surveyed 28,000 (28,544 to be specific!), but that would have taken a LONG time and likely produced skewed results from self-reported confidence under pressure (who doesn’t think they can lift that heavy object without throwing their back out or nail a slam dunk after a quick warm-up?).

Our in-house experts analysed real-world behaviours from organisations using Redflags to build a picture of what happens in the mind at the point of risk and the conditions that influence these actions; including top-down pressure to adopt AI tools, the adoption of shadow IT and ‘man vs machine-driven’ workplace anxiety. The report explores how these emerging behaviours develop, when they appear, and how interventions shape outcomes across the workforce.